> ## Documentation Index
> Fetch the complete documentation index at: https://docs.porcia.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Browser Extension Privacy

> Understanding privacy and data handling in the Porcia browser extension

# Browser Extension Privacy

Your privacy is our top priority. This guide explains exactly what the Porcia browser extension tracks, how your data is handled, and the privacy controls available to you.

## Privacy-First Design

The Porcia browser extension is built with privacy as a core principle:

<CardGroup cols={2}>
  <Card title="Local Processing" icon="computer">
    All analysis happens locally in your browser
  </Card>

  <Card title="Minimal Data" icon="minimize">
    Only domain names, detection method, and a work email boolean are sent to Porcia
  </Card>

  <Card title="No Content Reading" icon="eye-slash">
    Never reads page content, forms, or passwords
  </Card>

  <Card title="User Control" icon="sliders">
    Full control over what's tracked and when
  </Card>
</CardGroup>

## What We Track

### Data We Collect

**Login Event Information:**

* ✅ Domain name only (e.g., "slack.com")
* ✅ Detection method (login\_form, oauth\_google, oauth\_microsoft, saml\_sso, url\_pattern)
* ✅ Whether a work email was used (boolean only — the email itself is never stored)
* ✅ Timestamp of the login event

**Usage Patterns:**

* ✅ Login frequency per domain
* ✅ Time of day of login events

### Data We DON'T Collect

**Never Collected:**

* ❌ Specific page URLs or paths
* ❌ Page content or text
* ❌ Form inputs or passwords
* ❌ Keystrokes or mouse movements
* ❌ Screenshots or visual data
* ❌ Personal browsing history
* ❌ Non-SaaS websites
* ❌ Cookies or local storage
* ❌ Download history
* ❌ Bookmarks

<Warning>
  The extension detects login events (form submissions, OAuth clicks, SSO redirects) on web pages. Consumer domains like google.com, youtube.com, and reddit.com are automatically excluded.
</Warning>

## How Data is Processed

### Local Analysis

All analysis happens in your browser:

```mermaid theme={null}
graph LR
    A[Page Load] --> B[Monitor Login Events]
    B --> C{Login Detected?}
    C -->|Yes| D[Check Exclusion List]
    C -->|No| E[Ignore]
    D --> F{Excluded Domain?}
    F -->|No| G[Create Event]
    F -->|Yes| E
    G --> H[Queue for Sync]
```

<Steps>
  <Step title="Login Event Monitoring">
    Extension monitors for login events: form submissions with password fields, OAuth button clicks, and SSO redirects
  </Step>

  <Step title="Event Creation">
    If a login or authentication event is detected, a detection event is created locally
  </Step>

  <Step title="Local Queuing">
    Events are queued locally for batch sync
  </Step>

  <Step title="Batch Sync">
    Events are sent to Porcia in batches every 5 minutes (domain + detection method + work email boolean)
  </Step>
</Steps>

### What Gets Sent to Porcia

Only login event data is sent:

```json theme={null}
{
  "eventId": "uuid",
  "domain": "slack.com",
  "startTime": "2026-03-04T10:00:00Z",
  "endTime": "2026-03-04T10:00:05Z",
  "duration": 5,
  "detectionMethod": "oauth_google",
  "workEmailUsed": true
}
```

**No raw browsing data is ever transmitted.**

## Privacy Controls

### Tracking Controls

**Pause Detection**

* Stop all login detection with one click
* Resume anytime
* No data collected while paused

**Domain Exclusions**

* Exclude specific domains from detection
* Permanently ignore certain websites
* Useful for personal projects or sensitive sites

### Privacy Settings

**Incognito Mode Tracking**

* Disabled by default
* Can be enabled if needed for work
* Respects browser's private browsing intent

### Data Deletion

**Clear Local Data**

* Delete all locally stored usage data
* One-click clearing in settings
* Cannot be recovered after deletion

**Delete Server Data**

* Contact support to delete all server-side data
* Includes historical usage data
* Permanent deletion within 30 days

## Data Storage & Security

### Local Storage

**What's Stored Locally:**

* Recent usage data (configurable retention)
* Extension settings and preferences
* Domain exclusion list
* Sync status and timestamps

**Security:**

* Encrypted using browser's built-in encryption
* Isolated from other extensions
* Cleared when extension is uninstalled

### Server Storage

**What's Stored on Porcia Servers:**

* Login event data
* Domain names and detection methods
* Work email boolean flags
* User ID (for attribution)

**Security:**

* AES-256 encryption at rest
* TLS 1.3 encryption in transit
* Access control and audit logs
* Regular security audits

**Data Retention:**

* Active users: Data retained while account is active
* Deleted accounts: Data deleted within 30 days
* Backups: Removed from backups within 90 days

## Security & Privacy Commitments

### Data Privacy

Porcia is working towards formal compliance certifications. In the meantime, we are committed to giving you control over your data:

**Your Rights:**

* Right to access your data
* Right to delete your data
* Right to export your data
* Right to restrict processing
* Right to object to processing

**How to Exercise Rights:**

1. Go to Settings → Privacy
2. Click **Download My Data** or **Delete My Data**
3. Or contact [support@porcia.org](mailto:support@porcia.org)

### International Data Transfers

* We take steps to protect data transferred internationally
* Contact [support@porcia.org](mailto:support@porcia.org) for details on data transfer protections

## Transparency

### Open Source Components

The extension uses open-source libraries:

* All dependencies are publicly auditable
* No hidden tracking or analytics
* Regular security updates

### No Third-Party Tracking

* No Google Analytics in the extension
* No third-party advertising networks
* No data sold to third parties
* No cross-site tracking

### Audit Trail

Complete audit trail of data access:

* Who accessed your data
* When it was accessed
* What actions were taken
* Available in Settings → Privacy → Audit Log

## Common Privacy Questions

<AccordionGroup>
  <Accordion title="Can my employer see what websites I visit?">
    No. The extension only detects login events on non-excluded domains. Your employer can see:

    * Which SaaS applications you log into (e.g., "Slack")
    * How you authenticated (login form, OAuth, SSO)
    * Whether you used a work email (boolean only)

    Your employer CANNOT see:

    * Specific pages or URLs
    * What you're doing on those sites
    * Your email address or password
    * Personal browsing history
    * Consumer domains (Google, YouTube, Reddit, etc.)
  </Accordion>

  <Accordion title="Does the extension track my personal browsing?">
    No. The extension only detects login events. Personal websites, social media (unless you log in with a work email), and consumer domains are automatically excluded.
  </Accordion>

  <Accordion title="Can I use the extension without my team knowing?">
    You can pause detection at any time. When paused, no login events are captured. Contact your workspace admin about privacy options for your team.
  </Accordion>

  <Accordion title="What happens to my data if I leave the company?">
    When your account is deactivated, your usage data is retained for 30 days (in case of accidental deletion), then permanently deleted. You can request immediate deletion by contacting support.
  </Accordion>

  <Accordion title="Does Porcia sell my data?">
    No. We never sell your data to third parties. Period. Your usage data is used only to provide you with insights and optimization recommendations.
  </Accordion>

  <Accordion title="Can I see what data Porcia has about me?">
    Yes. Go to Settings → Privacy → Download My Data to export all data Porcia has collected about you.
  </Accordion>
</AccordionGroup>

## Privacy Best Practices

### For Individual Users

1. **Review detected domains regularly** - Ensure only work-related logins are captured
2. **Use domain exclusions** - Exclude personal projects or sensitive sites
3. **Review privacy settings** - Ensure they match your preferences

### For Workspace Admins

1. **Communicate clearly** - Explain what's detected and why
2. **Respect privacy** - Allow team members to pause detection
3. **Use aggregate data** - Focus on team trends, not individual behavior
4. **Provide opt-out** - Allow team members to opt out if needed
5. **Regular privacy reviews** - Ensure compliance with company policies

### For Privacy-Conscious Users

1. **Exclude sensitive domains** - Add to exclusion list
2. **Disable incognito detection** - Don't detect logins in private browsing
3. **Pause when needed** - Pause detection during personal time

## Privacy Policy

### Data Collection Purpose

We collect usage data to:

* Help you understand which SaaS tools you actually use
* Identify unused licenses and cost-saving opportunities
* Provide usage analytics and insights
* Improve Porcia's vendor database

### Data Sharing

We share data only:

* With your workspace
* With service providers (cloud infrastructure, hosting) under strict contracts
* When required by law (with notice to you if possible)

We NEVER share data:

* With advertisers
* With data brokers
* For marketing purposes
* With third parties for their own use

### Data Protection

We protect your data with:

* Encryption at rest and in transit
* Access controls and authentication
* Regular security audits
* Incident response procedures
* Employee training and background checks

## Contact & Support

### Privacy Questions

For privacy-related questions:

* Email: [privacy@porcia.org](mailto:privacy@porcia.org)
* Response time: Within 24 hours
* Escalation: [privacy-escalation@porcia.org](mailto:privacy-escalation@porcia.org)

### Data Requests

To request data access, deletion, or export:

1. Go to Settings → Privacy
2. Use self-service tools
3. Or email: [privacy@porcia.org](mailto:privacy@porcia.org)

### Security Issues

To report security vulnerabilities:

* Email: [security@porcia.org](mailto:security@porcia.org)
* We follow responsible disclosure practices

## Updates to Privacy Policy

We may update this privacy policy:

* You'll be notified of material changes
* Continued use implies acceptance
* You can opt out by uninstalling the extension

**Last Updated:** See latest version at porcia.org/legal/privacy

<Card title="Read Full Privacy Policy" icon="file-contract" href="https://porcia.org/legal/privacy">
  View complete privacy policy
</Card>

## Next Steps

<CardGroup cols={2}>
  <Card title="Extension Usage Guide" icon="mouse-pointer" href="/integrations/extension/usage">
    Learn how to use the extension
  </Card>

  <Card title="Extension Installation" icon="download" href="/integrations/extension/installation">
    Install the browser extension
  </Card>

  <Card title="Email Integration" icon="envelope" href="/integrations/email/overview">
    Connect your email for discovery
  </Card>

  <Card title="Contact Support" icon="life-ring" href="mailto:support@porcia.org">
    Get help from our team
  </Card>
</CardGroup>